Well I found out on returning to the game after a couple of months away that i've been hacked annoying thing is they took nothing off my 80 druid and priest which I don't play but left my main 74 paladin naked so unless I get my stuff back from Blizzard I can't see how I can level it
Downloaded the mobile authenticator now. Still puzzled as to how they got my password, I never follow any of the obvious phising emails or visit dodgey sites